Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
File: om-n7jCto1qx_ATzQP7fZHqfgWI.cer (raw, json)
Hash identifier: g5szEjU5roqgcXcvKStX5f2Anp6BCUzztWiP3bRwiBE=
Subject key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F9631B24D2B0CE51509414932B107
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.27.44.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:31:b2:4d:2b:0c:e5:15:09:41:49:32:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:74:d9:71:5d:68:b5:8f:01:f9:43:ce:3e:
cd:f4:25:c1:01:26:28:10:7b:17:98:74:93:37:fc:
c6:6d:15:b1:72:91:e0:86:3a:ae:b7:27:47:da:86:
5e:0c:45:4d:47:5e:d6:4f:82:c5:24:e3:47:7e:18:
09:fb:ad:b7:ee:c1:b7:a6:dd:6b:41:74:d2:fd:01:
ba:a7:64:51:3e:25:26:ef:5f:65:5b:1d:31:a5:d9:
a7:0a:c6:47:33:c5:1b:fc:ca:91:26:c3:99:19:23:
49:af:6c:28:b6:2c:3e:a8:19:fc:5b:56:7c:38:55:
e6:41:67:76:ca:3f:2b:c0:15:74:e4:aa:1e:95:27:
11:8f:51:1b:ec:88:7e:5b:25:a4:bf:c6:0c:8b:5a:
28:0b:fc:72:2a:25:9b:3e:83:e2:a1:21:f6:02:2d:
41:35:ca:c6:8a:cf:04:e5:b9:ed:b7:1a:d8:a5:28:
6f:0d:92:9c:88:0e:b8:ae:84:a6:6c:fe:28:e0:4f:
1c:56:e9:a0:43:ce:33:2c:2e:d2:71:0f:c7:b5:01:
e8:f6:5d:db:21:33:81:a5:1b:aa:42:d2:cd:85:7d:
3b:f3:2f:6f:c5:98:74:10:8f:f6:c8:37:56:27:06:
64:f0:65:a1:16:e2:e5:cf:c8:d7:70:79:64:dc:e1:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.44.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ca:d2:29:1d:d2:a3:d6:fe:15:a0:54:a0:c8:4c:eb:2c:ac:
73:6a:42:bf:bb:f3:f6:f5:7b:c8:52:3d:70:05:6f:60:4f:5e:
79:63:f7:ef:ac:b8:ac:45:fa:35:7c:3b:90:8a:09:81:19:f9:
41:e3:01:90:ce:b3:8a:4a:ce:25:25:63:88:b2:1d:5a:07:d7:
0c:2b:ea:5e:ff:20:c6:3f:ad:da:4a:aa:ef:53:3e:ea:f8:36:
e8:23:a5:1b:6e:4f:5b:00:d1:02:ca:c5:a3:a0:de:17:69:dc:
67:c3:37:bc:c2:62:67:ef:c3:1d:cc:56:86:d9:60:a2:15:56:
d1:06:ab:ef:18:36:d1:a0:42:9b:5f:5e:64:72:fa:87:20:07:
c7:1c:4a:da:8b:c4:a9:61:bb:3e:71:4a:d5:20:9e:13:f1:68:
96:66:03:e9:36:0b:60:31:7b:c7:00:0a:c6:d1:13:7e:92:b0:
0b:36:1c:0e:0a:8d:46:f1:8b:63:7f:7e:f8:43:75:ae:09:79:
68:de:97:ca:39:4b:a7:37:2c:c7:f6:ff:36:07:f9:a8:c8:5f:
4c:31:bc:73:1f:ce:98:a4:ae:ab:55:73:79:6e:ed:47:3e:07:
e7:57:0e:38:83:36:b6:a7:0a:bf:c7:c3:df:fe:42:7e:a5:16:
30:61:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:51 2025 by rpki-client on console.sobornost.net